{ lib, config, ... }: {
  nixpkgs.hostPlatform = "x86_64-linux";
  hardware.enableRedistributableFirmware = true;
  boot.initrd.availableKernelModules = [
    "nvme"
    "xhci_pci"
    "usb_storage"
    "sd_mod"
    "ata_piix"
    "virtio_pci"
    "virtio_scsi"
    "sr_mod"
  ];

  age.secrets.cepheus_userhjkl_password = {
    rekeyFile = ./secrets/password.age;
    owner = "userhjkl";
    group = "users";
    mode = "0400";
  };
  
  n.host = {
    hardware.cpu = "virt";
    bootloader = "grub";

    domain = "nothing.run";
    hostId = "0b6ce634";
    users."userhjkl" = lib.mkUser config.age.secrets.cepheus_userhjkl_password.path true;
    defaultUser = "userhjkl";
    types = [ "server" ];
  };

  imports = [
    (lib.fs.ext4 "/" "/dev/disk/by-uuid/8c2eee33-ab23-42b5-b22c-777fbede1ccf" null)
    (lib.fs.vfat "/boot" "/dev/disk/by-uuid/8B83-5678" null)
  ];
}